Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-openssl | Aug 30, 2017 | May 5, 2016 | |
| Amazon_linux | — | amazon-linux-upgrade-openssl | May 3, 2016 | May 3, 2016 |
| Apple Osx Openssl | apple-osx-upgrade-latest | Nov 11, 2016 | May 4, 2016 | |
| Centos_linux | — | centos-upgrade-opensslcentos-upgrade-openssl-develcentos-upgrade-openssl-libscentos-upgrade-openssl-perlcentos-upgrade-openssl-static | Jul 6, 2016 | May 4, 2016 |
| Cisco Anyconnect | cisco-anyconnect-upgrade-latest | Dec 16, 2020 | May 5, 2016 | |
| Cisco Asa | cisco-asa-update-latest | Oct 21, 2021 | May 5, 2016 | |
| Cisco Ise | cisco-ise-upgrade-latest | Oct 21, 2025 | May 4, 2016 | |
| Debian | debian-upgrade-openssl | May 3, 2016 | May 3, 2016 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | May 19, 2016 | |
| Freebsd | freebsd-upgrade-package-mariadb55-serverfreebsd-upgrade-package-mariadb100-serverfreebsd-upgrade-package-mariadb101-serverfreebsd-upgrade-package-mysql55-serverfreebsd-upgrade-package-mysql56-serverfreebsd-upgrade-package-mysql57-serverfreebsd-upgrade-package-percona55-serverfreebsd-upgrade-package-percona56-serverfreebsd-upgrade-package-opensslfreebsd-upgrade-package-linux-c6-opensslfreebsd-upgrade-package-libresslfreebsd-upgrade-package-libressl-develfreebsd-upgrade-base-10_3-release-p2freebsd-upgrade-base-10_2-release-p16freebsd-upgrade-base-10_1-release-p33freebsd-upgrade-base-9_3-release-p41 | Dec 10, 2025 | Jul 21, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-libs-openssl | Oct 30, 2017 | May 4, 2016 | |
| Hpsmh | — | hp-system-management-homepage-update-latest | Oct 27, 2016 | May 4, 2016 |
| Http Openssl | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | openssl-upgrade-latest | May 5, 2016 | May 5, 2016 |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-openssl098e | Sep 12, 2019 | May 5, 2016 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-openssl098e | Nov 19, 2019 | May 5, 2016 | |
| Ibm Aix | ibm-aix-openssl_advisory20 | Nov 30, 2017 | May 4, 2016 | |
| Oracle Mysql | mysql-upgrade-1_0_1mysql-upgrade-1_0_2 | Aug 22, 2016 | May 4, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-database-mysql-55-5-5-54-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-55-client-5-5-54-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-55-library-5-5-54-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-55-tests-5-5-54-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-56-5-6-35-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-56-client-5-6-35-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-56-library-5-6-35-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-56-tests-5-6-35-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-database-mysql-57-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-client-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-embedded-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-library-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-database-mysql-57-tests-5-7-23-0-175-3-35-0-5-0oracle-solaris-11-3-upgrade-library-security-openssl-1-0-1-20-0-175-3-9-0-1-0oracle-solaris-11-3-upgrade-library-security-openssl-openssl-fips-140-2-0-6-0-175-3-9-0-1-0oracle-solaris-11-3-upgrade-runtime-perl-512-5-12-5-0-175-3-19-0-2-0oracle-solaris-11-3-upgrade-runtime-perl-threaded-512-5-12-5-0-175-3-19-0-2-0 | May 29, 2017 | May 4, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-openssloracle-linux-upgrade-openssl-develoracle-linux-upgrade-openssl-fipsoracle-linux-upgrade-openssl-fips-develoracle-linux-upgrade-openssl-fips-perloracle-linux-upgrade-openssl-fips-staticoracle-linux-upgrade-openssl-libsoracle-linux-upgrade-openssl-perloracle-linux-upgrade-openssl-static | May 9, 2016 | May 3, 2016 |
| Panos | palo-alto-networks-pan-os-upgrade-6-0palo-alto-networks-pan-os-upgrade-6-1palo-alto-networks-pan-os-upgrade-7-0palo-alto-networks-pan-os-upgrade-7-1 | Oct 12, 2016 | May 4, 2016 | |
| Pulse Secure Pulse Connect Secure | pulse-secure-pulse-connect-secure-upgrade-5_2r7pulse-secure-pulse-connect-secure-upgrade-7_4r13_7pulse-secure-pulse-connect-secure-upgrade-8_0r16pulse-secure-pulse-connect-secure-upgrade-8_1r10pulse-secure-pulse-connect-secure-upgrade-8_2r4pulse-secure-pulse-connect-secure-upgrade-8_2r5 | Oct 28, 2020 | May 5, 2016 | |
| Red Hat Jboss Eap | red-hat-jboss-eap-upgrade-latest | Sep 19, 2024 | May 3, 2016 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-opensslredhat-upgrade-openssl-debuginforedhat-upgrade-openssl-develredhat-upgrade-openssl-libsredhat-upgrade-openssl-perlredhat-upgrade-openssl-static | Oct 6, 2017 | May 4, 2016 | |
| Suse | — | suse-upgrade-compat-openssl097gsuse-upgrade-compat-openssl097g-32bitsuse-upgrade-libopenssl-1_0_0-develsuse-upgrade-libopenssl-1_1-develsuse-upgrade-libopenssl-1_1-devel-32bitsuse-upgrade-libopenssl-develsuse-upgrade-libopenssl-devel-32bitsuse-upgrade-libopenssl0_9_8suse-upgrade-libopenssl0_9_8-32bitsuse-upgrade-libopenssl0_9_8-hmacsuse-upgrade-libopenssl0_9_8-hmac-32bitsuse-upgrade-libopenssl0_9_8-x86suse-upgrade-libopenssl1-develsuse-upgrade-libopenssl10suse-upgrade-libopenssl1_0_0suse-upgrade-libopenssl1_0_0-32bitsuse-upgrade-libopenssl1_0_0-hmacsuse-upgrade-libopenssl1_0_0-hmac-32bitsuse-upgrade-libopenssl1_0_0-x86suse-upgrade-libopenssl1_1suse-upgrade-libopenssl1_1-32bitsuse-upgrade-libopenssl1_1-hmacsuse-upgrade-libopenssl1_1-hmac-32bitsuse-upgrade-opensslsuse-upgrade-openssl-1_0_0suse-upgrade-openssl-1_0_0-docsuse-upgrade-openssl-1_1suse-upgrade-openssl-docsuse-upgrade-openssl1suse-upgrade-openssl1-docsuse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-image | May 3, 2016 | May 3, 2016 |
| Ubuntu | ubuntu-upgrade-libssl1-0-0 | May 3, 2016 | May 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub